From 2d6d4c59e66adfbb50f34a78af23d1878bf8369c Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Tue, 19 Mar 2024 12:14:28 +0000 Subject: Rename etc/session-desktop.profile to etc/profile-m-z/session-desktop.profile --- etc/profile-m-z/session-desktop.profile | 71 +++++++++++++++++++++++++++++++++ etc/session-desktop.profile | 71 --------------------------------- 2 files changed, 71 insertions(+), 71 deletions(-) create mode 100644 etc/profile-m-z/session-desktop.profile delete mode 100644 etc/session-desktop.profile diff --git a/etc/profile-m-z/session-desktop.profile b/etc/profile-m-z/session-desktop.profile new file mode 100644 index 000000000..b1076b080 --- /dev/null +++ b/etc/profile-m-z/session-desktop.profile @@ -0,0 +1,71 @@ +# Firejail profile for session-desktop +# Description: Encrypted messenger +# This file is overwritten after every install/update +# Persistent local customizations +include session-desktop.local +# Persistent global definitions +include globals.local + +blacklist /usr/libexec + +ignore noexec /tmp + +noblacklist ${HOME}/.config/Session + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-proc.inc +include disable-programs.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.config/Session +whitelist ${DOWNLOADS} +whitelist ${HOME}/.config/Session +whitelist /opt/Session +whitelist /opt/session-desktop +include whitelist-common.inc +include whitelist-run-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +ipc-namespace +netfilter +nodvd +nogroups +?HAS_APPIMAGE: ignore noinput +noinput +nonewprivs +noprinters +noroot +notv +nou2f +protocol unix,inet,inet6,netlink +seccomp !chroot +seccomp.block-secondary +tracelog + +disable-mnt +private-bin session-desktop*,session-messenger-desktop* +private-cache +?HAS_APPIMAGE: ignore private-dev +private-dev +private-etc @network,@tls-ca,@x11 +private-tmp + +dbus-user filter +dbus-user.talk org.freedesktop.impl.* +dbus-user.talk org.freedesktop.Notifications +dbus-user.talk org.freedesktop.portal.* +dbus-user.talk org.freedesktop.secrets +?ALLOW_TRAY: dbus-user.talk org.kde.StatusNotifierWatcher +?ALLOW_TRAY: dbus-user.own org.kde.* +dbus-system none + +# breaks app +#restrict-namespaces diff --git a/etc/session-desktop.profile b/etc/session-desktop.profile deleted file mode 100644 index b1076b080..000000000 --- a/etc/session-desktop.profile +++ /dev/null @@ -1,71 +0,0 @@ -# Firejail profile for session-desktop -# Description: Encrypted messenger -# This file is overwritten after every install/update -# Persistent local customizations -include session-desktop.local -# Persistent global definitions -include globals.local - -blacklist /usr/libexec - -ignore noexec /tmp - -noblacklist ${HOME}/.config/Session - -include disable-common.inc -include disable-devel.inc -include disable-exec.inc -include disable-interpreters.inc -include disable-proc.inc -include disable-programs.inc -include disable-shell.inc -include disable-xdg.inc - -mkdir ${HOME}/.config/Session -whitelist ${DOWNLOADS} -whitelist ${HOME}/.config/Session -whitelist /opt/Session -whitelist /opt/session-desktop -include whitelist-common.inc -include whitelist-run-common.inc -include whitelist-runuser-common.inc -include whitelist-usr-share-common.inc -include whitelist-var-common.inc - -apparmor -caps.drop all -ipc-namespace -netfilter -nodvd -nogroups -?HAS_APPIMAGE: ignore noinput -noinput -nonewprivs -noprinters -noroot -notv -nou2f -protocol unix,inet,inet6,netlink -seccomp !chroot -seccomp.block-secondary -tracelog - -disable-mnt -private-bin session-desktop*,session-messenger-desktop* -private-cache -?HAS_APPIMAGE: ignore private-dev -private-dev -private-etc @network,@tls-ca,@x11 -private-tmp - -dbus-user filter -dbus-user.talk org.freedesktop.impl.* -dbus-user.talk org.freedesktop.Notifications -dbus-user.talk org.freedesktop.portal.* -dbus-user.talk org.freedesktop.secrets -?ALLOW_TRAY: dbus-user.talk org.kde.StatusNotifierWatcher -?ALLOW_TRAY: dbus-user.own org.kde.* -dbus-system none - -# breaks app -#restrict-namespaces -- cgit v1.2.3-54-g00ecf